VMware Cloud Community
dschro
Contributor
Contributor

Constant login failure for VMWare identity service

I am getting constant login failures for a bad password for the VMWareIdentityService.exe and can't find anywhere to change the password for it.  Everything seems to be working amongst the VMWare environment.

Tags (1)
Reply
0 Kudos
11 Replies
akarydas2
Enthusiast
Enthusiast

Where exactly you see that? Does the service run under the local service account?

Best Regards

Reply
0 Kudos
vHaridas
Expert
Expert

can you provide logs or error message?

Please consider awarding points for "Correct" or "Helpful" replies. Thanks....!!! https://vprhlabs.blogspot.in/
Reply
0 Kudos
LucianoPatrão

Hi,

Did you choose a special user to run the VMware Windows services?? Like vCenter, Identify Service etc?

If is not a user, we could have an issue with Inventory Service Database.

https://kb.vmware.com/kb/2119422

All depends on what you have in the logs. Please provide vpxd.log and also inv-svc.log or invsvc.log. With this we can provide more help.


PS: If you try to use the search option in the vSphere Client Tool you get an error??



Luciano Patrão

VCP-DCV, VCAP-DCV Design 2023, VCP-Cloud 2023
vExpert vSAN, NSX, Cloud Provider, Veeam Vanguard
Solutions Architect - Tech Lead for VMware / Virtual Backups

________________________________
If helpful Please award points
Thank You
Blog: https://www.provirtualzone.com | Twitter: @Luciano_PT
Reply
0 Kudos
dschro
Contributor
Contributor

It is showing up in the security event log

Reply
0 Kudos
dschro
Contributor
Contributor

An account failed to log on.

Subject:

Security ID: SYSTEM

Account Name:

Account Domain:

Logon ID: 0x3E7

Logon Type: 3

Account For Which Logon Failed:

Security ID: NULL SID

Account Name:

Account Domain:

Failure Information:

Failure Reason: Unknown user name or bad password.

Status: 0xC000006D

Sub Status: 0xC000006A

Process Information:

Caller Process ID: 0x984

Caller Process Name: C:\Program Files\VMware\Infrastructure\VMware\CIS\vmware-sso\VMwareIdentityMgmtService.exe

Network Information:

Workstation Name:

Source Network Address: -

Source Port: -

Detailed Authentication Information:

Logon Process: Advapi 

Authentication Package: Negotiate

Transited Services: -

Package Name (NTLM only): -

Key Length: 0

Reply
0 Kudos
dschro
Contributor
Contributor

This all started after I changed the password for this account, it is a domain account and none of the services are using this account to login with.

Reply
0 Kudos
vHaridas
Expert
Expert

are you using that domain account to run Identity service?

If Yes, go to services.msc, select Identity service and update user's password in properties.

if you are not using windows account to run the service then try this - go to Windows Control panel --> Credential Manager and clear all saved passwords.

Please consider awarding points for "Correct" or "Helpful" replies. Thanks....!!! https://vprhlabs.blogspot.in/
Reply
0 Kudos
dschro
Contributor
Contributor

The identity service is using the local system account and I looked in the credential manager and there isn't any saved passwords.

Reply
0 Kudos
dschro
Contributor
Contributor

Looking in the vpxd log I see this event

2016-05-30T08:22:39.055-04:00 [07116 error '[SSO]' opID=20341374] [UserDirectorySso] AcquireToken exception: class SsoClient::InvalidCredentialsException(Authentication failed: Invalid credentials)

2016-05-30T08:22:39.055-04:00 [07116 error 'authvpxdUser' opID=20341374] Failed to authenticate user <Domain account>

Reply
0 Kudos
rrathi
Contributor
Contributor

Did you find solution for the above issue? Last few weeks, i am getting exactly same message in windows event logs. Please let me know. THank you.

Reply
0 Kudos
dschro
Contributor
Contributor

No i never found the solution to it.  I opened a case with Vmware but they tried telling me it was a bug in the software causing that even though its not doing it on our second instance of vcenter on a different network.  I even upgraded the software and its still doing it so theres no way its a bug.

Reply
0 Kudos